# jurniti > jurniti is the secure managed agent platform. Each agent runs in its own real Firecracker microVM with hardware-enforced KVM isolation — not a shared Docker container. Your model API keys live only inside your VM (BYOK); we never see, proxy, or mark up your spend. Three open-source agent runtimes are supported: Nous Research Hermes, OpenClaw, and Pi. From $25/mo with a 30-day money-back guarantee. jurniti is the platform; Hermes / OpenClaw / Pi are the "harnesses" — the open-source agent runtimes that run inside the microVM. Each harness gets its own subscription, its own dedicated microVM, and its own dedicated CPU + RAM (pinned cgroup reservations, not noisy-neighbor slices). Running Hermes + OpenClaw + Pi at Starter is 3 × $25 = $75/mo. The wedge is real hardware isolation: Firecracker is the same primitive AWS uses for Lambda. Runs on AWS EC2 nested-virtualization hosts (us-west-2) — one density-sliced host per region; additional regions land when per-region MRR clears the cost of a second box. Boots in ~124ms; full provisioning (Stripe checkout → fresh shell terminal) takes ~3 minutes. Pricing is flat per VM, billed monthly or annual (2 months free on annual): Starter $25/mo ($250/yr), Pro $49/mo ($490/yr), Max $99/mo ($990/yr). No free trial and no free tier — the de-risk is a 30-day money-back guarantee on every plan. ## Product - [Home](https://www.jurniti.com): Platform overview — "Real isolation. Your keys never leave the box." Hero pitch, harness picker, problem framing, feature grid, quickstart, pricing, FAQ. - [Pricing](https://www.jurniti.com/pricing): Flat tiers, monthly or annual — Starter $25/mo or $250/yr (1 vCPU, 2 GiB RAM, 10 GiB SSD, 100 Mbit/s), Pro $49/mo or $490/yr (2 vCPU, 6 GiB RAM, 50 GiB SSD, 200 Mbit/s, custom subdomain), Max $99/mo or $990/yr (4 vCPU, 12 GiB RAM, 100 GiB SSD, 500 Mbit/s, daily snapshot). 30-day money-back guarantee; no free trial or free tier. ## Harnesses - [Hermes — Managed Nous Research Hermes Agent](https://www.jurniti.com/hermes): Run the Nous Research Hermes Agent on a real microVM — fresh Ubuntu, persistent home directory, your Hermes Dashboard at `.jurniti.com`. uv pre-installed; upstream quickstart copy-paste ready. Snapshot + restart, daily backups (Max). BYOK for OpenRouter / Nous Portal / OpenAI / Anthropic. - [OpenClaw — Managed OpenClaw Hosting](https://www.jurniti.com/openclaw): Run OpenClaw on a real microVM — bridge Discord / WhatsApp / Signal / Telegram to your LLM with the plugin ecosystem you already know. Public TLS subdomain, persistent workspace, supports OpenClaw's full provider matrix (Anthropic, OpenAI, Nous Portal, etc.). - [Pi — Managed Pi Coding Agent](https://www.jurniti.com/pi): Run Pi (the minimal coding-agent CLI by Mario Zechner) on a real microVM — 4-tool core, self-extending, JS-native. Persistent workspace, public TLS subdomain, and write access to extensions the agent installs itself. ## Templates A template is a snapshot of a configured agent VM's persist disk, captured by its owner and published so anyone can fork it into their own new VM — the classic-GitHub model: public is unlimited and free forever, private is paid. Secrets and PII are scrubbed on public publish; the fork boots a fresh VM seeded with the template's files and config (you bring your own model keys). - [Public templates gallery](https://www.jurniti.com/templates): Browse, sort, and filter every public template. Each template has its own page at `https://www.jurniti.com/templates/` (or the creator vanity URL `https://www.jurniti.com//`), showing its harness, specs, README, lineage, fork count, and stars. - Private templates use a count-based Templates plan — 4 tiers t5/t10/t20/t50 = 5/10/20/50 private slots at $5/$9/$17/$29 per month (additive 50-slot blocks past t50); there is no free private tier. **To fork a template:** open its page at `https://www.jurniti.com/templates/` and use the **Fork** action. Forking starts a normal Stripe Checkout for a new VM (same flat plan price, no fork fee); when payment confirms, jurniti auto-provisions a fresh microVM seeded with the template's persist disk. This is the one canonical way to fork today. The full, always-current machine-readable index of the site — every harness, the pricing detail, the docs and guides, and the public templates catalog — lives at [/llms-full.txt](https://www.jurniti.com/llms-full.txt). ## Agent copy (markdown twins) Every marketing page, developer-docs page, blog guide, and public template page has an agent-copyable markdown twin — append `.md` to its URL (e.g. `https://www.jurniti.com/hermes.md`, `https://www.jurniti.com/docs/quickstart.md`, `https://www.jurniti.com/blog/hermes-agent-hosting.md`, `https://www.jurniti.com/templates/.md`). Index pages have twins too: `/blog.md`, `/docs.md`, `/templates.md`. Fetch the twin instead of scraping the HTML. ## Guides - [Blog index](https://www.jurniti.com/blog): Long-form guides on running each supported agent harness on jurniti — one per harness, comparisons included. Markdown index of every post (with per-post `.md` links): [/blog.md](https://www.jurniti.com/blog.md). ## Developer CLI jurniti ships a developer CLI (one binary) that provisions, bills, and manages your agent microVMs from the terminal or CI — and doubles as an MCP server so your own agent gets the exact same commands (the CLI verb, the REST noun, and the MCP tool are one operation). Install: `curl -fsSL https://jurniti.com/install.sh | sh`. - [CLI + MCP quickstart](https://www.jurniti.com/docs): Install → `jurniti login` → `jurniti billing add-card` → `jurniti up` → connect, plus the full verb reference. Bringing a VM up needs a card on file — no free trial, no free tier (30-day money-back instead). - Verbs today: `jurniti login`, `jurniti whoami`, `jurniti harnesses`, `jurniti up`, `jurniti auth`, `jurniti stop`, `jurniti start`, `jurniti restart`, `jurniti reprovision`, `jurniti capture`, `jurniti publish`, `jurniti fork`, `jurniti vms ls`, `jurniti vms get `, `jurniti templates ls`, `jurniti usage`, `jurniti billing`, `jurniti keys`, `jurniti env`, `jurniti skills`, `jurniti docs`, `jurniti mcp`. - Mount as an MCP server for your agent: `claude mcp add jurniti -- jurniti mcp`. - Agent-copyable docs index: [/docs/llms.txt](https://www.jurniti.com/docs/llms.txt). ### Skills Copyable agent playbooks (SKILL.md) that teach your own Claude Code / Codex the jurniti workflows — fetch one and drop it in your agent's skills dir, or run `jurniti skills install`. - [jurniti](https://www.jurniti.com/skills/jurniti.md): Orientation for the jurniti developer CLI + MCP surface — install, log in, mount into your own agent, and the full verb map. - [jurniti-provision-agent](https://www.jurniti.com/skills/jurniti-provision-agent.md): Provision a fresh managed agent microVM and connect to it — the log in → add a card → up → connect flow. - [jurniti-fork-template](https://www.jurniti.com/skills/jurniti-fork-template.md): Fork a public or private template into a fresh paid VM and customize it. - [jurniti-templatize](https://www.jurniti.com/skills/jurniti-templatize.md): Turn a configured VM into a reusable template — capture public or private, then publish or flip visibility. ## Legal - [Privacy](https://www.jurniti.com/privacy): Data handling, BYOK key isolation (keys never leave the tenant VM), audit log redaction policy. - [Terms](https://www.jurniti.com/terms): Acceptable use, billing, 30-day money-back terms. ## What jurniti is NOT - Not a shared-kernel Docker container — every tenant gets a real KVM-isolated virtual machine. - Not a model proxy — we don't see your prompts, your tokens, or your spend. BYOK is the whole point. - Not a managed agent fork — we ship the upstream Hermes / OpenClaw / Pi installer at first boot, no proprietary patches. - Not a build system — your VM is the build environment. We don't compile your code.